An open API service indexing awesome lists of open source software.

https://github.com/reginald-gillespie/gitsniff

GitSniff is an OSINT tool designed to extract emails from metadata on GitHub accounts and repos.
https://github.com/reginald-gillespie/gitsniff

email email-osint github github-osint information-gathering osint osint-python osint-reconnaissance osint-tool osint-tools scanner

Last synced: 2 months ago
JSON representation

GitSniff is an OSINT tool designed to extract emails from metadata on GitHub accounts and repos.

Awesome Lists containing this project

README

          

![License](https://img.shields.io/badge/license-MIT-green.svg)
![GitHub stars](https://img.shields.io/github/stars/Reginald-Gillespie/GitSniff.svg)

# GitSniff
GitSniff is an MIT licensed OSINT tool designed to extract emails from metadata on GitHub accounts and repos.
I built this because all the other similar tools were too limited or broke years ago.

## Features
- Find emails in github repo metadata.
- Find emails from GitHub's user event feed
- Outputs results as a table or JSON

## Install
```bash
pip install gitsniff
```

## Usage
```bash
# Scan a user.
gitsniff -u

# Scan a single repo.
gitsniff -r

# Show full help pages.
gitsniff -h
```

![GitSniff Scan Results](results.png)

The email, `reginaldgillespie@protonmail.com`, is my email. The rest are the emails of other users found in my repositories because they contributed to them using their real emails.

### Full Help Page
```
$ gitsniff -h
usage: gitsniff [-h] (-u USERNAME | -r OWNER/REPO) [--no-repos] [--no-events] [-f] [--private] [--max-commits N] [--start-index N] [--max-repos N] [--max-events N] [-t TOKEN] [--token-file FILE] [-p URL] [-j]

GitSniff - GitHub Email Scanner for OSINT

options:
-h, --help Show this help message and exit

Target Selection (required):
-u, --user USERNAME Scan GitHub user or organization
-r, --repo OWNER/REPO
Scan single repository

Scanning Methods:
--no-repos Disable repository cloning scan
--no-events Disable public event API scan

Repository Options:
-f, --forks Include forked repositories
--private Include private repositories (requires token)
--max-commits N Max commits per repository (default: 1000)
--start-index N Start repo scan from index N (default: 0)
--max-repos N Maximum repositories to scan

Event Options:
--max-events N Max public events to scan (default: 1000)

Connection & Output:
-t, --token TOKEN GitHub personal access token
--token-file FILE Path to token file (default: pat.env)
-p, --proxy URL HTTP/SOCKS proxy URL
-j, --json Output in JSON format

Examples:
gitsniff -u username # Scan user's repositories and events
gitsniff -u username --no-events # Scan only repositories
gitsniff -u username --no-repos # Scan only public events
gitsniff -r owner/repo # Scan specific repository
gitsniff -u username -f --max-repos 5 # Include forks, limit to 5 repos
gitsniff -u username --private -t TOKEN # Include private repos with token
```

---

This project was inspired by similar, but more limited projects such as:
- [GONZOsint/gitrecon](https://github.com/GONZOsint/gitrecon) - scans event feeds for information.
- [chm0dx/gitSome](https://github.com/chm0dx/gitSome) - scans single repositories.